[gs-bugs] [Bug 692627] New: freeing overlong text span lists can cause a stack overflow

[bugzilla-daemon at ghostscript.com]

http://bugs.ghostscript.com/show_bug.cgi?id=692627

           Summary: freeing overlong text span lists can cause a stack
                    overflow
           Product: MuPDF
           Version: unspecified
          Platform: PC
               URL: http://code.google.com/p/sumatrapdf/issues/detail?id=1
                    676
        OS/Version: Windows 7
            Status: NEW
          Severity: normal
          Priority: P4
         Component: fitz
        AssignedTo: tor.andersson at artifex.com
        ReportedBy: zeniko at gmail.com
         QAContact: gs-bugs at ghostscript.com


We've been getting reports about crashes in fz_free_text_span for a while, but
so far couldn't believe that such overlong text span lists actually occurred in
the wild. Apparently they do:
http://www.ochaopt.org/documents/ocha_opt_wb_access_and_closure_map_august_2011_web.pdf

-- 
Configure bugmail: http://bugs.ghostscript.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.